$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft File: HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json) Hash identifier: UpTki3XeYnMGUsC3tPHdAo87KpyTsFXPfBP+cVOofAk= Subject key identifier: E6:BF:44:6D:C3:C0:8B:1B:D7:4A:F2:72:AB:8D:1D:6F:E6:B1:8D:20 Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 Certificate issuer: /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Certificate serial: 3599 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft Manifest number: 3599 Signing time: Fri 04 Sep 2026 14:21:59 +0000 Manifest this update: Fri 04 Sep 2026 14:21:59 +0000 Manifest next update: Fri 11 Sep 2026 14:21:59 +0000 Files and hashes: 1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: f7szTQG/gjp5GAaXJcNYsJYjq3RWV4nb5AMQ/sdrlsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13721 (0x3599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6 Validity Not Before: Sep 4 14:21:59 2026 GMT Not After : Sep 11 14:21:59 2026 GMT Subject: CN=6a9ad407-24bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:6d:de:71:6e:e4:5f:49:33:83:46:3a:e4: 24:2a:79:a6:29:44:65:97:a0:f8:b5:42:33:2d:b4: 13:e6:71:2c:36:ae:b0:ff:cc:c0:7c:34:2c:be:5e: ec:21:c5:fe:39:49:c9:ee:af:4a:0f:fe:53:ac:8b: e3:53:16:3a:f4:a6:e3:1a:99:05:24:17:31:cf:96: 41:c8:5d:cf:92:17:50:72:0f:ea:8f:79:bc:f6:cb: 96:48:95:3b:fb:57:c5:dc:bf:34:8d:71:15:1f:ed: 42:70:d7:cf:93:78:e1:95:38:13:88:d6:99:85:ce: 7b:8e:61:5a:38:1a:ba:7e:1d:db:e6:fc:d3:a1:cb: d4:23:0c:55:d7:7e:dd:25:b3:00:ec:c8:79:3b:fb: a9:95:d8:21:ee:62:a2:1d:ab:05:24:09:66:e2:33: a2:f1:35:29:e7:0a:19:bc:71:dc:0c:52:a5:0d:d3: 36:2d:b6:a3:58:58:85:b5:86:44:d1:f1:7a:3d:44: 3e:5a:23:a9:87:8a:aa:a2:2f:ea:8d:bd:1c:09:3b: b7:03:71:f7:a0:c8:ba:97:99:c1:f7:ae:41:47:18: f6:04:6a:16:40:7c:3f:02:55:ac:d9:77:b2:75:da: 94:07:bc:5b:bf:c4:3e:d2:7f:61:65:4f:0e:83:49: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BF:44:6D:C3:C0:8B:1B:D7:4A:F2:72:AB:8D:1D:6F:E6:B1:8D:20 X509v3 Authority Key Identifier: keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:d8:b4:28:ec:32:bb:bd:86:de:f8:3f:54:79:3e:fd:66:d0: ac:3a:a0:f0:f3:ee:34:38:db:a4:ea:d2:f4:3d:4b:a8:17:47: fa:f6:a9:8e:b9:8d:66:5d:64:e9:d0:68:88:ce:c8:5c:b5:20: 30:07:6c:d8:d6:67:a5:a6:99:bd:51:db:6a:60:39:7f:e1:c3: db:2e:d5:bc:dc:c4:ed:fa:e7:61:c9:5c:6f:3e:fb:ba:5d:6d: 45:fb:8e:7f:bb:3c:8d:d6:40:f2:93:af:a1:83:f9:9a:a5:23: 80:46:b7:69:62:84:29:90:a5:96:2d:ec:47:e4:9a:06:97:72: aa:b3:62:aa:3b:3d:ca:13:b5:e6:21:39:66:1b:3d:59:e2:ef: 69:d8:90:84:56:40:8c:6d:c4:c5:a2:38:67:66:4c:43:5e:45: 81:32:84:ed:bb:16:38:b0:9b:37:98:9a:0e:65:39:6b:89:3c: d1:db:38:71:d6:fd:d9:4a:25:96:03:7d:79:25:8a:02:92:c4: 35:28:74:d0:a1:4c:8d:49:f5:de:e8:06:b0:1e:90:d3:11:8e: 92:89:21:9a:e5:72:66:b5:99:53:22:98:70:21:bd:3c:7e:9c: 32:d4:3e:31:2e:a7:3f:95:32:ee:fc:00:2a:6e:1f:d5:ca:0f: b2:88:61:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDFFQ0M5NzhBNTNFRjJCRTg4RTVGMjZBRDlCOEFCODgz NzNEMTk3QTYwHhcNMjYwOTA0MTQyMTU5WhcNMjYwOTExMTQyMTU5WjAYMRYwFAYD VQQDEw02YTlhZDQwNy0yNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnht3nFu5F9JM4NGOuQkKnmmKURll6D4tUIzLbQT5nEsNq6w/8zAfDQsvl7s IcX+OUnJ7q9KD/5TrIvjUxY69KbjGpkFJBcxz5ZByF3PkhdQcg/qj3m89suWSJU7 +1fF3L80jXEVH+1CcNfPk3jhlTgTiNaZhc57jmFaOBq6fh3b5vzTocvUIwxV137d JbMA7Mh5O/upldgh7mKiHasFJAlm4jOi8TUp5woZvHHcDFKlDdM2LbajWFiFtYZE 0fF6PUQ+WiOph4qqoi/qjb0cCTu3A3H3oMi6l5nB965BRxj2BGoWQHw/AlWs2Xey ddqUB7xbv8Q+0n9hZU8Og0n+VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOa/RG3D wIsb10rycquNHW/msY0gMB8GA1UdIwQYMBaAFB7Ml4pT7yvojl8mrZuKuINz0Zem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9CRkVCMDAwODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkstaU9YeWF0bTRxNGczUFJs NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0hzeVhpbFB2Sy1pT1h5YXRtNHE0ZzNQUmw2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS9CRkVCMDAwODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9Ic3lYaWxQdkst aU9YeWF0bTRxNGczUFJsNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtdi0KOwyu72G3vg/VHk+/WbQrDqg8PPuNDjbpOrS9D1LqBdH+vapjrmNZl1k 6dBoiM7IXLUgMAds2NZnpaaZvVHbamA5f+HD2y7VvNzE7frnYclcbz77ul1tRfuO f7s8jdZA8pOvoYP5mqUjgEa3aWKEKZClli3sR+SaBpdyqrNiqjs9yhO15iE5Zhs9 WeLvadiQhFZAjG3ExaI4Z2ZMQ15FgTKE7bsWOLCbN5iaDmU5a4k80ds4cdb92Uol lgN9eSWKApLENSh00KFMjUn13ugGsB6Q0xGOkokhmuVyZrWZUyKYcCG9PH6cMtQ+ MS6nP5Uy7vwAKm4f1coPsohh4Q== -----END CERTIFICATE-----Generated at Fri Sep 4 23:25:09 2026 by rpki-client